moonpig[.]entrance-cryptolist[.]com

The domain moonpig.entrance-cryptolist.com is currently assessed as an elevated risk for phishing according to available threat intelligence as of July 29, 2026. This domain was registered on June 17, 2024, through the registrar Key-Systems GmbH and is configured with Cloudflare nameservers (daisy.ns.cloudflare.com and sri.ns.cloudflare.com). It resolves to the IP address 188.114.96.3, which is associated with Cloudflare's infrastructure, a common setup for both legitimate and malicious sites.

Analysis shows that this domain is listed on at least one security blocklist and was specifically blocked by PhishDestroy, indicating that security vendors consider it a probable phishing threat. VirusTotal results support this finding, with 16 out of 91 security vendors flagging the domain as malicious or suspicious. However, the precise nature of content hosted on the domain has not been directly verified, and no page title or site content analysis is available, so the specific method or target of phishing remains unconfirmed based on current data.

Given the combination of recent registration, detections by multiple security vendors, and active blocklisting, defenders should consider the domain potentially dangerous. It is recommended to proactively block access to moonpig.entrance-cryptolist.com within security controls and monitor for any related traffic in organizational networks. No evidence is available regarding SSL status or HTTP response behavior, so further technical investigation may be warranted. The risk assessment may change if additional intelligence such as content analysis or direct site investigation becomes available. At this time, organizations should treat this domain as a likely phishing threat.